Privacy Policy

Vêtu — operated by Jashughatt Media Pty Ltd — Last updated: 23 June 2026

This Privacy Policy describes how Jashughatt Media Pty Ltd (“we”, “us”, “our”) collects, uses, and shares your personal information when you use Vêtu.

1. Information We Collect

Account information: Your name and email address, captured when you sign in — via Apple Sign-In on iOS (if you choose to share your email) or Google sign-in on Android.

Wardrobe data: Photos of clothing items you upload, along with AI-generated tags (category, colour, season, occasion, style), cost information you provide, and wear frequency logs.

Usage data: Feature interactions, session duration, screen views, and in-app events (such as outfits created and items tagged).

Device information: Device model, operating system version, and device identifiers used for crash reporting and analytics.

Subscription information: Your subscription status (trial, premium, or free) and trial end date, managed via RevenueCat.

Push notification token: An Expo push token used to send trial-related notifications. Push notifications are optional.

2. How We Use Your Information

• To provide the Vêtu service: classify clothing, generate outfit suggestions, compute cost-per-wear analytics, and produce virtual try-on results
• To manage your subscription and process payments via Apple's App Store (iOS) or Google Play (Android)
• To send trial nurture notifications (Day 3 and Day 6 of your trial) if you have granted push notification permission
• To provide in-app customer support via Intercom
• To monitor app stability and fix crashes via Firebase Crashlytics and Sentry
• To analyse product usage and improve the app via Firebase Analytics and Microsoft Clarity
• To measure the effectiveness of our advertising campaigns (server-side only — see Section 5)

3. Third-Party Service Providers

We share your data with the following processors, each bound by their own privacy terms:

• Supabase (Supabase Inc.) — Database, authentication, and file storage. Your wardrobe photos and account data are stored on Supabase servers in the United States.
• OpenAI (OpenAI, L.L.C.) — AI clothing classification and automated content moderation. Your wardrobe and wishlist item photos are sent to OpenAI's API to generate tags (category, colour, season, occasion, style); and every photo you upload (wardrobe, wishlist, and profile) is screened by OpenAI's automated moderation model for nudity/explicit content before processing, with images that fail rejected and deleted. The virtual try-on images we generate for you are also screened by OpenAI's moderation model before they are shown, and a generated image that fails screening is blocked and not displayed. OpenAI does not use data submitted via its API to train its models.
• Fashn.ai — Virtual try-on. When you use virtual try-on, the relevant wardrobe or wishlist item photo and your uploaded profile photo are sent to Fashn.ai to generate the try-on image.
• Anthropic (Anthropic PBC) — AI styling assistance. Your wardrobe item tags and style preferences (text only — not your photos) are sent to Anthropic's Claude API to power the outfit coach, daily outfit suggestions, and wishlist “wardrobe fit” analysis. Anthropic does not use data submitted via its API to train its models.
• RevenueCat (RevenueCat Inc.) — Subscription management. Receives your subscription status and your App Store (iOS) or Google Play (Android) purchase receipt data.
• Apple — Payment processing via the App Store, for iOS users. Governed by Apple's privacy policy.
• Google (Google LLC) — Payment processing via Google Play, for Android users. Governed by Google's privacy policy.
• Firebase / Google Analytics (Google LLC) — App analytics and crash reporting. Crash reports may include device state at the time of the crash.
• Sentry (Functional Software Inc.) — API error monitoring. Error reports may include request metadata (not your wardrobe content).
• Intercom (Intercom R&D Unlimited Company) — Customer support and in-app messaging. We share your user ID, email, subscription tier, and trial end date with Intercom to personalise trial nurture messages.
• Microsoft Clarity — Session replay and heatmaps. Records anonymised interaction data (taps, scrolls, screen flow). Payment screens are masked and not recorded.
• Meta Platforms — Advertising measurement via Conversions API (CAPI). We send conversion events (app install, trial start, purchase) server-side using hashed email addresses. We do not use the Meta Pixel, we do not request iOS App Tracking Transparency (ATT) permission, and we do not use a device advertising identifier (the iOS IDFA or the Android Advertising ID).
• TikTok — Advertising measurement via TikTok Events API. Same server-side, hashed-email approach as Meta. No TikTok Pixel or ATT prompt.
• Google Ads — Advertising measurement via Enhanced Conversions. Server-side conversion reporting with hashed email. No client-side tracking tag.

4. Data Retention

Your wardrobe data and account information are retained for as long as your account is active. If you delete your account, your data (including all wardrobe photos and wear logs) is deleted within 30 days. Anonymised aggregate analytics data may be retained beyond this period.

5. Advertising Measurement — No Tracking Without Consent

Vêtu measures advertising effectiveness using server-side APIs only (Meta Conversions API, TikTok Events API, Google Enhanced Conversions). We do not use client-side tracking pixels and we do not use a device advertising identifier — on iOS we do not request App Tracking Transparency (ATT) permission and do not use the IDFA; on Android we do not collect or use the Advertising ID. Hashed email addresses are used for event matching where available; raw email addresses are never sent to advertising platforms.

6. Your Rights (POPIA — South Africa)

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Object to the processing of your personal information

To exercise these rights, contact us at accounts@getvetu.com. We will respond within 30 days. Account deletion is also available in-app under Profile & Settings.

7. Your Rights (GDPR — European Economic Area)

If you are located in the EEA, you have the rights listed in Section 6 plus the right to data portability and the right to lodge a complaint with your local supervisory authority. Contact us at accounts@getvetu.com.

8. Do Not Sell or Share My Personal Information (CCPA — California)

If you are a California resident, you have the right to opt out of the “sale” or “sharing” of your personal information under the California Consumer Privacy Act (CCPA). We do not sell your personal information in the traditional sense. However, our use of server-side advertising measurement APIs may be considered “sharing” under CCPA.

To opt out, email accounts@getvetu.com with the subject line “CCPA Opt-Out Request”. Include your account email address. We will process your request within 15 business days and exclude your data from all advertising measurement transmissions.

You also have the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising your privacy rights.

9. Children's Privacy

Vêtu is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at accounts@getvetu.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the app. The “Last updated” date at the top reflects the most recent revision. Continued use of Vêtu after the effective date constitutes acceptance of the updated policy.

11. Contact

Privacy questions or requests: accounts@getvetu.com
Jashughatt Media Pty Ltd, Bryanston, Sandton, South Africa

Jashughatt Media Pty Ltd — Bryanston, Sandton, South Africa